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IN THE CLAIMS 

Please substitute claims 1-24 with the following: 

1. (Previously Presented) A person authentication system for executing personal 
authentication by comparing templates with sampling information input by a user, the templates 
being personal identification data acquired beforehand, the person authentication system 
comprising: 

a personal identification certificate authority which generates and issues a person 
identification certificate having data items in accordance with a predetermined format and 
storing template information including the templates; and 

an entity which acquires the person identification certificate and which executes a person 
authentication process on the basis of the templates of the acquired person identification 
certificate 

wherein the template information is encrypted using a public key of said personal 
identification certificate authority and stored in the person identification certificate to be 
generated by said personal identification certificate authority. 

2. (Original) A person authentication system according to claim 1, wherein the 
person identification certificate issued by said personal identification certificate authority 
includes a digital signature added by said personal identification certificate authority. 

3. (Original) A person authentication system according to claim 1, wherein the 
person identification certificate issued by said person identification certificate authority includes, 
as indispensable data, an identifier capable of identifying the person identification certificate and 
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identification data of the person to be authenticated on the basis of the person identification 
certificate. 

4. (Cancelled). 

5. (Original) A person authentication system according to claim 1, wherein the 
template information is encrypted using a public key of said entity and stored in the person 
identification certificate to be generated by said personal identification certificate authority. 

6. (Original) A person authentication system according to claim 1, wherein the 
template information is encrypted using a common key and stored in the person identification 
certificate to be generated by said identification certificate authority, the common key being 
encrypted using a public key of said entity and stored in the person identification certificate. 

7. (Original) A person authentication system according to claim 1, wherein the 
template information is encrypted and stored, along with corresponding encryption algorithm 
information, in the person identification certificate to be generated by said personal identification 
certificate authority. 

8. (Original) A person authentication system according to claim 1, wherein the 
person identification certificate generated by said personal identification certificate authority 
stores personal information data of the person to be authenticated. 

9. (Original) A person authentication system according to claim 1, wherein the 
person identification certificate generated by said identification certificate authority stores, as a 
public key certificate information of the person to be authenticated, identification data of a public 
key certificate of the person to be authenticated. 
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10. (Original) A person authentication system according to claim 1, wherein the 
person identification certificate generated by said personal identification certificate authority 
stores link information linked to a public key certificate used in data communication or data 
processing which is executed on a condition that the personal authentication is successfully 
executed on the basis of the person identification certificate. 

11. (Original) A person authentication system according to claim 1, wherein the 
templates stored in the person identification certificate include at least one of fingerprint 
information, retina pattern information, iris pattern information, voice print information, and 
handwriting information which are biometric information, and a seal, a passport, a driver's 
license, and a card which are non-biometric information, or include a combination of at least one 
of the information and a password. 

12. (Original) A person authentication system according to claim 1, wherein said 
entity is a service provider that makes a deal with a user who has been identified on the basis of 
the person identification certificate, a user device accessed by a user who has been identified on 
the basis of the person identification certificate, or said person identification certificate authority. 

13. (Previously Presented) A person authentication method for executing personal 
authentication by comparing templates with sampling information input by a user, the templates 
being personal identification data acquired beforehand, the person identification method 
comprising the steps of: 

generating and issuing, at a personal identification certificate authority, a person 
identification certificate that has data items in accordance with a predetermined format and that 
stores template information including the templates; 
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acquiring, at an entity, the person identification certificate and executing a person 
authentication process on the basis of the templates of the acquired person identification 
certificate; and 

encrypting the template information using a public key of said personal identification 
certificate authority and storing the template information in the person identification certificate to 
be generated at said personal identification certificate authority. 

14. (Previously Presented) A person authentication method according to claim 13, 
further comprising the step of adding a digital signature of said personal identification certificate 
authority to the person identification certificate to be issued at said personal identification 
certificate authority. 

15. (Cancelled). 

16. (Original) A person authentication method according to claim 13, wherein the 
template information is encrypted using a public key of said entity and stored in the person 
identification certificate to be generated at said personal identification certificate authority. 

17. (Original) A person authentication method according to claim 13, wherein the 
template information is encrypted using a common key and stored in the person identification 
certificate to be generated at said personal identification certificate authority, the common key 
being encrypted using a public key of said entity and stored in the person identification 
certificate. 

18. (Original) A person authentication method according to claim 13, wherein the 
template information is encrypted and stored, along with corresponding encryption algorithm 
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information, in the person identification certificate to be generated at said personal identification 
certificate authority. 

19. (Previously Presented) A person authentication method according to claim 13, 
further comprising the step of storing a personal information data of the person to be 
authenticated in the certificate identification certificate to be generated at said personal 
identification certificate authority. 

20. (Previously Presented) A person authentication method according to claim 13, 
further comprising the step of storing identification data of a public key certificate of the person 
to be authenticated, as a public key certificate information of the person to be authenticated, in 
the person identification certificate to be generated at said personal identification certificate 
authority. 

21. (Previously Presented) A person authentication method according to claim 13, 
further comprising the step of storing link information linked to a public key certificate used in 
data communication or data processing in a person identification certificate to be generated at 
said identification certificate authority, the data communication or data processing being 
executed on a condition that the personal authentication is successfully executed on the basis of 
the person identification certificate. 

22. (Previously Presented) An information processing apparatus which executes 
personal authentication by comparing templates with sampling information input by a user, the 
templates being personal identification data acquired beforehand, the information processing 
apparatus comprising: 
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storage means for storing a person identification certificate which has data items in 
accordance with a predetermined format and which stores template information including the 
templates; and 

processing means for verifying the person identification certificate, acquiring the 
templates from the person identification certificate, encrypting the template information using a 
public key of said identification certificate authority, and executing a person authentication 
process on the basis of the acquired templates. 

23. (Original) An information processing apparatus according to claim 22, further 
comprising encryption processing means for decrypting encrypted templates stored in the person 
identification certificate. 

24. (Previously Presented) A computer readable program medium to perform a 
method for executing personal authentication by comparing templates with sampling information 
input by a user, the sampling information being personal identification data acquired beforehand, 
the method comprising the steps of: 

generating and issuing, at a personal identification certificate authority, a person 
identification certificate that has data items in accordance with a predetermined format and that 
stores template information including the templates; 

encrypting the template information using a public key of said identification certificate 
authority, and 

acquiring, at an entity, the person identification certificate and executing a person 
authentication process on the basis of the templates of the acquired person identification 
certificate. 



